📝 docs(adr): close 5 partial ADRs with code-confirmed status updates

Verifier Dim B (homogeneity + code↔docs confrontation) flagged 5 ADRs
stuck at "Partially Implemented" while the corresponding code is live.
Audit + status update:

- ADR-0009 (Hybrid testing) → Implemented; SDK gen explicitly out of scope
- ADR-0013 (OpenAPI toolchain) → Implemented; SDK gen explicitly out of
  scope, cross-refs ADR-0009
- ADR-0018 (User auth) → Implemented; user model, JWT auth, password
  reset, admin endpoints, greet personalization, BDD coverage all live
  (verified in pkg/user/, pkg/auth/, features/auth/)
- ADR-0019 (Postgres) → Implemented (core); per-item next-steps audit:
  CI integration ✅, performance tuning + monitoring tracked separately
- ADR-0024 (BDD test org) → Implemented Phase 1+2+3; PR #35 closed
  Phase 3 parallel testing with 2.85x speedup, strategy in ADR-0025

No code changes — pure status reconciliation. The Status field is now
the single source of truth for what's done vs deferred, removing the
"forever Partial" doc drift the verifier flagged.

adr/0018-user-management-auth-system.md

@@ -1,7 +1,7 @@
 # 18. User Management and Authentication System
 
 **Date:** 2026-04-06
-**Status:** Partially Implemented
+**Status:** Implemented (user model, JWT auth, password-reset workflow, admin endpoints, greet personalization, BDD coverage all live; future enhancements like 2FA / email verification belong in separate ADRs)
 **Authors:** Product Owner
 **Decision Drivers:** Security, User Personalization, Admin Functionality